Abstract: A method for monitoring a technical system including a plurality of computing units on which software components can be installed during operation of the technical system. The computing units are monitored based on a monitoring requirement associated with the software components. A device, a computer program product, a storage medium, and a vehicle, are also described.

Abstract: A computer-implemented method for planning an allocation of at least one computational task from a computational resource comprised in at least one vehicle to one or more of a plurality of external computational resources in a vehicular communications network. The method comprises obtaining a spatial representation of a region characterising at least one route of a vehicle from a first location to a second location, and data characterising an availability of external computational resources at a plurality of locations in the region, providing at least one computational requirement indication of at least one atomic computational task required by the vehicle during a prospective movement of the vehicle from the first location to the second location, comparing the at least one computational requirement indication to the data characterising the availability of external computational resources at the plurality of locations in the region.

Abstract: A method for ascertaining a configuration of an output of safety-relevant and non-safety-relevant information for a user of an AR device, in particular AR glasses. The method includes: receiving first data, wherein the first data are specific to at least one object in the in particular indirect and/or immediate surroundings of the user; ascertaining a safety relevance of the at least one object to the user on the basis of the first data; generating an output signal to the AR device depending on the ascertained safety relevance such that the AR device outputs safety-relevant information relating to the at least one object with a higher priority than non-safety-relevant information.

Abstract: A method for processing sensor data in a control device of a vehicle. The method includes: evaluating sensor data generated by different sensors of the vehicle for detecting its environment, via different evaluation functions which convert at least part of the sensor data as input data into output data, wherein the output data are assigned a priority using an assignment rule based on known insufficiencies of the sensors and/or the evaluation functions and the output data are used according to their priority in order to update an environment model that stores information about objects in the environment of the vehicle; recognizing an insufficiency that differs from the known insufficiencies using at least a part of the sensor data and/or at least a part of the output data; updating the assignment rule based on the recognized insufficiency.

Abstract: A computer-implemented method for determining a safety integrity level of a safety-related vehicle function of a motor vehicle, includes providing at least one infrastructure and/or vehicle sensor data signal, which represents infrastructure and/or vehicle sensor data, which are intended for the safety-related vehicle function provided by the motor vehicle. The method further includes determining a safety integrity level of the safety-related vehicle function based on the infrastructure and/or vehicle sensor data signal provided; and allocating a calculation of the safety-related vehicle function to an in-vehicle and/or an off-vehicle system, taking into account a predetermined safety integrity of the in-vehicle and/or the off-vehicle system.

Abstract: A method and a system for ascertaining a surface condition of a road region using at least one sensor of a vehicle. Data from the sensor are collected, wherein the collected data are evaluated in order to ascertain the surface condition of the road region. The surface condition is analyzed with regard to its shape, and at least one road defect of the road portion is ascertained. A planned vehicle trajectory of the vehicle is adjusted based on the at least one ascertained road defect in order to reduce the ascertained road defect and/or to prevent further road defects.

Abstract: A method for monitoring a distributed system, in which a change in a composition of components of the system is provided in an ongoing operation of the system. The method includes: carrying out a component check in which an incompatibility of the components with one another is identified; carrying out an interface check in which an incompatibility of at least one interface between the components is identified. The component check and the interface check in the case of the change in the composition of the components are carried out repeatedly in ongoing operation of the system.

Abstract: A method for operating a management program that is provided to manage at least one intervention from at least one application program in a motor vehicle into at least one component of the motor vehicle. When establishing the extent of the at least one intervention, information being made available from outside of the vehicle is taken into account.

Abstract: A computer-implemented method for behavior planning of a vehicle. The method includes: ascertaining at least one planned driving behavior of the vehicle depending on an environmental perception of a vehicle environment of the vehicle, ascertaining at least one spatially resolved degree of importance of a functional impairment of the environmental perception and a spatially resolved perception capability of the environmental perception, in each case in relation to the planned driving behavior, ascertaining a risk of the functional impairment of the environmental perception for the planned driving behavior at least depending on the degree of importance and the perception capability, ascertaining a risk of the planned driving behavior for the vehicle and/or the vehicle environment depending on the risk of the functional impairment, calculating the driving behavior to be applied depending on the planned driving behavior and the risk of the planned driving behavior.

Abstract: A method for determining an encryption method for vehicle communication. The method includes: providing sensor data, wherein the sensor data result from a detection by at least one sensor of a vehicle; ascertaining an environmental model based on the sensor data provided, wherein the environmental model represents an environment of the vehicle; evaluating a current condition for the vehicle communication based on an analysis of the environmental model and an analysis of at least one communication parameter, wherein the at least one communication parameter characterizes a communication with at least one potential communication partner of the vehicle; determining the encryption method for the vehicle communication based on a result of the evaluation. A computer program, a device, and a storage medium, are also described.

Abstract: A computer-implemented method for evaluating results of a computer-based machine learning system. The method includes receiving a data set of real elements, wherein each real element of the data set of real elements corresponds to a real observation; receiving a first result that was calculated by the computer-based machine learning system using the data set of real elements; generating a data set of synthetic elements in relation to the data set of real elements; transmitting the data set of synthetic elements; receiving a second result calculated by the computer-based machine learning system using the data set of synthetic elements; comparing the first result to the second result; determining, based on the first result and/or comparing the first result to the second result, one or more validity values characterizing a confidence measure of the calculated first result.

Abstract: A method for location-dependent verification of a teleoperator for remote control of a vehicle. At its current location, the vehicle repeatedly and automatedly performs the following: receiving, from the teleoperator, during remote control by the teleoperator, a response message requested via a network, ascertaining a current value of at least one network-dependent property of the received response message, determining a target value of the at least one network-dependent property, verifying the teleoperator by means of a verification of the current value of the at least one network-dependent property and of the determined target value based on a test condition, wherein in the case of a positive test result of the check, the teleoperator is authorized to perform the remote control of the vehicle, and in the case of a negative test result of the check, the vehicle terminates the remote control and/or sends a safety warning.

Abstract: A method for providing a function by a group of computing units in which computation instances are executed, each computation instance implementing the function using at least one algorithm and being set up to determine at least one result in response to a call of the function. The method includes: determining an integrity level for each of the computation instances; receiving a function request from a subscriber, the function request including a quality requirement that includes an integrity requirement; selecting a plurality of the computation instances corresponding to the quality requirement, so that the integrity level of the selected computation instances corresponds to the integrity requirement; calling the function in the selected computation instances corresponding to the function request in order to determine a plurality of results; determining a response based on the results, taking into account the quality requirement; and sending the response to the subscriber.

Abstract: A method for creating a measuring system having at least two measuring devices is disclosed. The method includes (i) identifying at least one ambient condition affecting a function of the at least two measuring devices of the measuring system, (ii) determining the failure probability of the measuring system in the presence of the at least one identified ambient condition, taking into account a positive and/or a negative error dependency between the at least two measuring devices, (iii) adjusting at least one of the at least two measuring devices such that the negative error dependence between the at least two measuring devices is increased, (iv) and creating the measuring system having the at least two measuring devices.

Abstract: A computer-implemented method for behavior planning of a vehicle, a processing device, and a vehicle control device.

Abstract: A sensor has a sensor element, a sensor data output, a data interface, sensor electronics, and an evaluation apparatus. The sensor element is configured to determine a physical measured variable. The sensor electronics are configured to convert the physical measured variable into sensor data that are output via the sensor data output. The evaluation apparatus is configured to determine a grade of the sensor data based on at least one parameter and to output the grade using the data interface.

Abstract: A method for controlling a vehicle. In the method, data of a digital road map are read in, zones are determined for the digital road map, and possible sequences of trips along a road of the digital road map are ascertained as a function of the determined zones. Furthermore, it is ascertained, as a function of sensor data and/or current driving data of the vehicle, whether a current or predicted traffic situation is outside the possible sequences or corresponds to a possible sequence that is determined as being outside an intended operating range. If the current or predicted traffic situation is outside the possible sequences or corresponds to the possible sequence outside the intended operating range, a measure is determined and the vehicle is controlled as a function of the measure that is taken.

Abstract: A method for evaluating suitability route sections of a digital map storing landmarks for automated driving operation of a vehicle is provided. For each route section of the digital map a spatial density of landmarks is determined, an expected recognizability of the landmarks is determined by a vehicle sensor system under predetermined ambient conditions, a classification is performed based on the determined density and recognizability of the landmarks as to whether a vehicle can be located on the route section with a minimum accuracy required for a predetermined operating mode and/or for a predetermined driving maneuver, and a classification result is stored as a data record in a route attribute associated with the route section, the route attribute indicating for which of the predetermined operating modes and/or driving maneuvers requirements for the minimum accuracy of the landmark-based vehicle localization are met under which of the predetermined environmental conditions.

Abstract: A method for controlling a robotic device. In the method, for a version of a control software which is not the initial version of the control software for which the test values delivered by the tests at least partially do not fall within predefined ranges, it is checked whether that version of the control software fulfills safety criteria that have been created for a previous version (and are fulfilled by that version) for which the test values delivered by the tests at least partially do not fall within the predefined ranges, but was safe. If this is the case, the robotic device is controlled with that version of the control software.

Abstract: A method for providing a function via a network of processing units using multiple computing instances. Each computing instance implements the function and is configured, when it is executed, to determine at least one result in response to a call-up of the function. The method includes validating the computing instances, each being checked as to whether the computing instance corresponds to a respective predetermined state; determining a respective level of reliability for each of the processing units; starting execution of successfully validated computing instances in the processing units, which have a level of reliability that is equal/greater than a predetermined minimum level of reliability; receiving a function request from a user; calling up the function in at least a portion of the executed computing instances corresponding to the function request, in order to determine multiple results; determining a response based on the results; and sending the response to the user.